t3chn0m4g3
b9da9f04af
adjust default field
2020-02-03 12:18:43 +00:00
t3chn0m4g3
984ba958fb
logstash template not upgraded
...
with daily index enabled logstash will not be able to put new events into ES
simple solution, just deleting logstash template upon logstash start and leave it to logstash to upload the latest template
.
2020-02-01 14:08:23 +00:00
t3chn0m4g3
64729f5064
remove ilm support, breaks existing index at upgrade
2020-01-31 15:50:34 +00:00
t3chn0m4g3
5a4724bcba
elk 7.x dev test
2020-01-31 14:21:55 +00:00
t3chn0m4g3
fa0fdbb579
prepare for ELK migration to 7.x
2020-01-29 14:21:40 +00:00
t3chn0m4g3
f110eb08b0
prepare for mailoney json logging
2020-01-22 12:17:30 +00:00
t3chn0m4g3
1d0aad3b34
tweak logstash.conf for citrixhoneypot
2020-01-16 18:04:29 +00:00
t3chn0m4g3
a6ed6613a5
prepare citrixhoneypot for ELK integration
2020-01-16 15:13:58 +00:00
t3chn0m4g3
66bb9443f9
bump elk stack to 6.8.2
2019-08-28 11:49:03 +00:00
t3chn0m4g3
bc6e94d329
spiderfoot, head bump to latest master
2019-08-16 17:29:41 +00:00
t3chn0m4g3
bf39c0f5b2
bump elastic stack to 6.7.2
2019-08-15 15:38:12 +00:00
t3chn0m4g3
364831ae58
fix cd
2019-08-15 08:32:04 +00:00
t3chn0m4g3
31d7707d19
download instead of git pull
...
download translation maps rather than running a git pull
translation maps will now be bzip2 compressed to reduce traffic to a minimum
fixes #432
2019-08-14 14:43:47 +00:00
t3chn0m4g3
bbf226aeda
remove glastopf
2019-06-03 19:57:50 +00:00
t3chn0m4g3
a7e553efe9
still working on fatt
2019-06-03 16:13:58 +00:00
t3chn0m4g3
f870c8e885
continue working on fatt
2019-06-03 10:22:07 +00:00
listbot
867bda6ad7
increase number of fields limit
...
#382
2019-05-31 15:34:29 +00:00
listbot
c09547e3a4
adjust group and permissions for /data
2019-05-08 11:16:48 +00:00
t3chn0m4g3
e8d8773863
tweaking
2019-03-19 11:08:23 +00:00
t3chn0m4g3
573ceb98a1
bump elk stack to 6.6.2, replace wget with aria2 to speed up d/l
2019-03-15 22:23:30 +00:00
t3chn0m4g3
6f30322ad5
prepare for honeypy
2019-03-10 18:15:59 +00:00
t3chn0m4g3
869f05ca8b
cleanup
2019-03-01 21:08:36 +00:00
listbot
e1fe025dd7
remove fallback
2019-02-28 21:03:07 +00:00
listbot
728607a2da
bump elk stack to 6.6.1
2019-02-28 14:52:42 +00:00
t3chn0m4g3
9664d7b6c3
kibana pin to alpine 3.8
2019-02-25 15:49:26 +00:00
t3chn0m4g3
4754526884
bump elk stack to 6.5.4
2019-01-14 20:41:08 +00:00
t3chn0m4g3
c4bae5f715
bump elk stack to 6.5.2
2018-12-10 17:25:46 +00:00
t3chn0m4g3
c7873554c3
prepare for adbhoney
2018-12-05 16:59:08 +00:00
t3chn0m4g3
1c8074bce3
update docs, screenshots
2018-11-24 01:05:21 +01:00
t3chn0m4g3
aa17604a7a
change defaults for kibana.yml
2018-11-23 22:32:11 +00:00
t3chn0m4g3
5e8345695f
bump elk stack to 6.5.1
...
fix docker hub build
2018-11-22 23:18:59 +00:00
t3chn0m4g3
ece169dd76
update docker-compose files
2018-11-21 09:26:31 +00:00
t3chn0m4g3
ed921d31f8
cleaning up
2018-11-19 12:34:07 +00:00
t3chn0m4g3
53383f7313
rename fields
2018-11-19 11:33:00 +00:00
t3chn0m4g3
5754c79086
clean up log sources
2018-11-13 15:46:57 +00:00
t3chn0m4g3
106193fac5
fix for CVE-2018-17244
2018-11-09 14:36:54 +00:00
t3chn0m4g3
c46d3e4f6f
bump elk to 6.4.2
2018-10-12 16:07:20 +00:00
t3chn0m4g3
0c86bd9a5a
tweaking
2018-09-11 12:19:26 +00:00
t3chn0m4g3
992d453b9a
medpot tweaking
2018-09-11 07:59:14 +00:00
t3chn0m4g3
f0f6981f34
add medpot to ELK
2018-09-10 01:15:21 +00:00
Marco Ochse
79bb324a4a
rename conpot fields to match index pattern
2018-08-28 13:30:58 +02:00
Marco Ochse
d19d3823f6
prevent status field from being indexed as string
2018-08-28 12:41:11 +02:00
listbot
59c8c5b34c
bump ELK to 6.4.0
...
YES! Index patterns can finally exported through Kibana! A joy to the ELK world :-)
2018-08-24 17:07:00 +00:00
t3chn0m4g3
a6d996d016
fix kibana ci color for highlighted elements
2018-08-02 17:36:11 +00:00
t3chn0m4g3
67d5c5a26c
get FQDN for ES head from open window
2018-08-01 20:09:05 +00:00
t3chn0m4g3
7945961cee
Bump ELK to 6.3.2
2018-07-31 14:31:49 +00:00
t3chn0m4g3
38112755ce
Fix ci logo
2018-06-28 12:30:27 +00:00
t3chn0m4g3
00482df95b
Bump ELK Stack to 6.3.0
2018-06-26 17:34:14 +00:00
Marco Ochse
b19aa6d5c8
update favicon
2018-06-26 10:09:33 +02:00
Marco Ochse
1dd57d8022
NGINX logs are in /data/nginx/log/
...
Syslog should be viewed in Cockpit now, storing events of Syslog in ELK
is ineffective
2018-06-24 03:24:51 +02:00